Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2F8FA932DD1B11ED8036C53DC4F9AE02.roa
File: 2F8FA932DD1B11ED8036C53DC4F9AE02.roa (raw, json)
Hash identifier: l3r+tZ5C943WPHFLThtPjunl2fcIKK0LId5SzmijqKc=
Subject key identifier: 84:73:84:E0:49:6E:DC:0A:72:1E:C1:AA:CA:10:FE:C5:94:9F:90:D2
Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial: CB
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2F8FA932DD1B11ED8036C53DC4F9AE02.roa
Signing time: Sat 11 May 2024 06:39:59 +0000
ROA not before: Sat 11 May 2024 06:39:59 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 134486
IP address blocks: 103.131.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 04:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Validity
Not Before: May 11 06:39:59 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=663f12bf-c2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:c4:a6:ac:2a:2f:ad:ab:41:7f:a4:2d:d1:
84:ac:38:a9:4b:3e:30:53:8c:87:6e:36:64:e0:0b:
ac:b1:23:05:4e:f7:85:03:3d:52:17:49:ab:c0:8a:
00:32:b1:45:d6:7d:de:01:d4:05:77:47:4a:5b:01:
7e:b8:ef:68:d6:f7:d8:0b:12:e9:a2:fd:e2:19:4b:
90:11:10:36:2d:b4:da:e9:35:f2:97:0a:aa:d5:6a:
af:d3:91:34:eb:f4:23:af:3e:22:26:44:40:b3:16:
a7:71:f5:27:7c:3f:eb:8c:41:17:c1:e9:ac:06:cd:
35:e4:a3:65:f2:87:ed:34:29:5c:00:d8:18:fe:ce:
5a:75:1d:b6:68:00:e6:aa:57:1c:25:e2:c2:ea:51:
d8:ce:ac:38:4d:19:63:36:9e:97:3c:06:7c:4a:c5:
c6:97:0a:37:57:ce:c2:bb:7f:c0:1b:0c:25:9f:2b:
22:fa:30:72:48:b9:bb:72:aa:d5:70:e6:80:c5:f5:
35:da:4f:9a:a3:8b:c0:d6:dc:57:6b:5b:4d:1a:c1:
6c:74:ba:0f:63:dc:b3:8d:c9:af:ee:7a:02:e4:06:
49:fa:4d:3e:dd:34:03:76:c8:b4:e1:92:1e:c0:a0:
54:07:25:ad:c8:42:f7:f8:2f:d2:2d:4e:1e:e3:99:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:84:E0:49:6E:DC:0A:72:1E:C1:AA:CA:10:FE:C5:94:9F:90:D2
X509v3 Authority Key Identifier:
keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2F8FA932DD1B11ED8036C53DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ce:98:dc:2c:34:27:27:cc:c0:dc:4e:12:ae:35:08:3d:5e:
f4:85:71:29:b1:d4:c9:2d:4a:a3:65:5d:62:b7:57:66:54:c5:
12:a0:0c:ea:02:b5:f4:14:1c:b6:63:7d:19:3d:66:50:28:f4:
87:87:e6:c0:d6:2b:cb:59:23:bb:ef:27:23:08:13:04:2c:b0:
f2:41:94:21:0a:90:a6:80:b8:a7:09:67:1f:09:90:1e:7a:1e:
ab:3d:0d:66:6a:be:a7:6c:13:42:7b:e6:5a:5b:07:df:09:20:
20:a6:7f:fa:90:d3:f0:69:05:21:b4:87:22:8c:c7:81:d0:0e:
42:54:61:81:2b:ff:5f:3b:08:14:70:61:df:38:23:2b:c3:10:
67:67:65:3d:51:74:ea:e4:ee:43:d8:31:a3:c6:b4:db:80:4d:
27:90:cb:ff:9e:64:3b:18:06:74:34:5e:4c:fa:69:0e:12:3c:
69:4b:87:89:2a:a5:9a:07:25:87:b7:e3:4a:44:0c:4c:74:9e:
86:19:1f:f3:cd:da:77:40:7f:54:65:97:0c:3e:25:8f:98:95:
87:07:cd:a0:e0:ee:0b:99:24:3b:e8:c2:b5:03:d6:da:f3:01:
de:3b:84:0a:26:7a:2d:e6:20:d8:00:b2:e2:1e:36:7d:e0:a9:
16:f1:c9:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD
MDE1NDhDQzYwHhcNMjQwNTExMDYzOTU5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjNmMTJiZi1jMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyH/EpqwqL62rQX+kLdGErDipSz4wU4yHbjZk4AussSMFTveFAz1SF0mrwIoA
MrFF1n3eAdQFd0dKWwF+uO9o1vfYCxLpov3iGUuQERA2LbTa6TXylwqq1Wqv05E0
6/Qjrz4iJkRAsxancfUnfD/rjEEXwemsBs015KNl8oftNClcANgY/s5adR22aADm
qlccJeLC6lHYzqw4TRljNp6XPAZ8SsXGlwo3V87Cu3/AGwwlnysi+jBySLm7cqrV
cOaAxfU12k+ao4vA1txXa1tNGsFsdLoPY9yzjcmv7noC5AZJ+k0+3TQDdsi04ZIe
wKBUByWtyEL3+C/SLU4e45lHoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIRzhOBJ
btwKch7BqsoQ/sWUn5DSMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE
MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq
TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc2NEYvQ0VEMEY4N0VERDE3MTFFRDgxNDc0NjJGQzRGOUFFMDIvMkY4RkE5MzJE
RDFCMTFFRDgwMzZDNTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABng8YwDQYJKoZIhvcNAQELBQADggEBAD3OmNwsNCcnzMDc
ThKuNQg9XvSFcSmx1MktSqNlXWK3V2ZUxRKgDOoCtfQUHLZjfRk9ZlAo9IeH5sDW
K8tZI7vvJyMIEwQssPJBlCEKkKaAuKcJZx8JkB56Hqs9DWZqvqdsE0J75lpbB98J
ICCmf/qQ0/BpBSG0hyKMx4HQDkJUYYEr/187CBRwYd84IyvDEGdnZT1RdOrk7kPY
MaPGtNuATSeQy/+eZDsYBnQ0Xkz6aQ4SPGlLh4kqpZoHJYe340pEDEx0noYZH/PN
2ndAf1Rllww+JY+YlYcHzaDg7guZJDvowrUD1trzAd47hAomei3mINgAsuIeNn3g
qRbxydk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org